Conference paper Open Access

Certifying Graph-Manipulating C Programs via Localizations within Data Structures

Wang, Shengyi; Cao, Qinxiang; Mohan, Anshuman; Hobor, Aquinas

We develop powerful and general techniques to mechanically verify realistic programs that manipulate heap- represented graphs. These graphs can exhibit well-known organization principles, such as being a directed acyclic graph or a disjoint-forest; alternatively, these graphs can be totally unstructured. The common thread for such structures is that they exhibit deep intrinsic sharing and can be expressed using the language of graph theory. We construct a modular and general setup for reasoning about abstract mathematical graphs and use separation logic to define how such abstract graphs are represented concretely in the heap. We develop a Localize rule that enables modular reasoning about such programs, and show how this rule can support existential quantifiers in postconditions and smoothly handle modified program variables. We demonstrate the generality and power of our techniques by integrating them into the Verified Software Toolchain and certifying the correctness of six graph-manipulating programs written in CompCert C, including a 400-line generational garbage collector for the CertiCoq project. While doing so, we identify two places where the semantics of C is too weak to define generational garbage collectors of the sort used in the OCaml runtime. Our proofs are entirely machine-checked in Coq.

As submitted to the OOPSLA '19 Artifact Evaluation Committee
Files (148.9 kB)
Name Size
Artifact_Overview_Docker.pdf
md5:602c9478fa6265bdca4f34408ce57399
144.1 kB Download
Dockerfile
md5:c2f7395843cda78bcae4b75d4194ff1f
2.6 kB Download
LICENSE
md5:7e28b3f6d85cc870275862ef1c6e9088
1.6 kB Download
README
md5:d440c95b8232662a9215246b8c2076c1
579 Bytes Download
8
12
views
downloads
All versions This version
Views 88
Downloads 1212
Data volume 1.2 MB1.2 MB
Unique views 44
Unique downloads 55

Share

Cite as